conn.asp

QQ呱唧网

<%
dim sql_injdata
SQL_injdata = lcase("'|and|exec|insert|update|count|chr")
SQL_inj = split(SQL_Injdata,"|")
If Request.Form<>"" Then
For Each Sql_Post In Request.Form
For SQL_Data=0 To Ubound(SQL_inj)
if instr(lcase(Request.Form(Sql_Post)),Sql_Inj(Sql_DATA))>0 Then
Response.Write "<Script Language=JavaScript>alert('QQ天天挂SQL通用防注入系统提示↓\n\n请不要在参数中包含非法字符尝试注入！\n\nHTTP://www.QQgua.com  ');history.back(-1)</Script>"
Response.end
end if
next
next
end if
If Request.QueryString<>"" Then
For Each SQL_Get In Request.QueryString
For SQL_Data=0 To Ubound(SQL_inj)
if instr(lcase(Request.QueryString(SQL_Get)),Sql_Inj(Sql_DATA))>0 Then
Response.Write "<Script Language=JavaScript>alert('QQ天天挂SQL通用防注入系统提示↓\n\n请不要在参数中包含非法字符尝试注入！\n\nHTTP://www.QQgua.com ');history.back(-1)</Script>"
Response.end
end if
next
Next
End If

db=server.mappath("../") & "\QQ.mdb"
set fs=createobject("scripting.filesystemobject")
if fs.FileExists(db)=false then db=server.mappath("../../") & "\QQ.mdb"
Set conn = Server.CreateObject("ADODB.Connection")
connstr="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" &db
conn.Open connstr

sub closeconn()
end sub

sqlConfig="select * from Web_Setting"
set rsConfig=Server.CreateObject("ADODB.Recordset")
rsConfig.open sqlConfig,conn,1,3
if rsConfig.bof and rsConfig.eof then
response.write "网站配置数据丢失！系统无法正常运行！"
response.end
else
SiteName=rsConfig("SiteName")
SiteTitle=rsConfig("SiteTitle")
SiteUrl=rsConfig("SiteUrl")
SiteKey=rsConfig("SiteKey")
run_state=rsConfig("run_state")
CloseMsg=rsconfig("CloseMsg")
Sysmsg=rsConfig("Closemsg")
Onlinemax=rsconfig("Onlinemax")
MaxInfo=rsconfig("MaxInfo")
SystemMsg=rsconfig("SystemMsg")
CloseState=rsconfig("CloseState")
maxDay=Rsconfig("MaxDay")
end if

function GetOnlineMax()
SQL="Select * from QQ where not(QQ_state ='下线')"
set rs=createobject("adodb.recordset")
rs.open sql,conn,3,2
if rs.eof then 
GetOnlineMax=0
exit function
else
GetOnlineMax=RS.recordcount
end if 
end function
%>